Hello everyone.

I recently updated my Software AG products in my workstation using Update Manager.

But, after the update, I started to receive the following error when I try to connect to my Integration Server inside the Designer:

Connection failed for myIsHost:5200 (Server certificate rejected by ChainVerifier)
Server certificate rejected by ChainVerifier

All of the certificates in our Integration Server are valid and didn’t expire yet.

I tried to create a new keystore and truststore with the most recent ones in the IS and I set a new HTTPs port that uses them. Still, no success.

Please, what should I do to fix this issue inside Designer? I can only connect to my IS via HTTP.

Thank you

Follow these steps (from Designer online help):

Configuring SSL Connections in Designer

Use the following procedure to configure a Secure Sockets Layer (SSL) connection in Software AG Designer.

For more information about Java SSL configurations, see the JSSE Reference Guide in the Java SE documentation.

To configure an SSL connection

1. Locate the following file in your Designer installation:

Software AG_directory \Designer\eclipse\configuration\config.ini

2. Open the file in a text editor.

3. Add the following lines to the file:

javax.net.ssl.trustStore=truststore file path

where truststore file path is the path to the server truststore in your file system. For example:

javax.net.ssl.trustStore=C:\keystore\localhost.jks

Note: Be sure to use the correct separators when specifying the path to the truststore file. For example: C:\

javax.net.ssl.trustStoreType=truststore file type

where truststore file type is the type of truststore file that the server supports. For example:

javax.net.ssl.trustStoreType=JKS

4. Save the file and restart Designer.

Hello Dear @Tong_Wang .

Thank you for your answer with the config.ini change. But, unfortunately, it didn’t solve the issue

I set the properties that the help suggested as follows:

javax.net.ssl.trustStore=C:\SoftwareAG\jvm\jvm\jre\lib\security\integrationserver.jks
javax.net.ssl.trustStoreType=JKS

But I’m still getting the same error. This ‘.jks’ file it’s the same used in our Integration Server.

Please, is there anything else that I must check?

Thank you.

If you are not worried about connection trust and risk of accepting all certificate, paste below line in config.ini and restart designer. This will accept all certificate chain.

-Dtrust_all_cert=true

Or else prove your current config.ini to check.

Hello @Farid_Yar_Khan

You solution, unfortunately, did not work.

My “eclipse.ini” file inside “C:\SoftwareAG\Designer\eclipse” path has the following configuration:

# Launch configuration settings for Software AG Designer
# For information, refer to the Software AG Designer documentation, available as online help in Designer itself or on the Software AG documentation website.
-product
com.webmethods.product.designer.ide
-startup
plugins/org.eclipse.equinox.launcher_1.4.0.v20161219-1356.jar
--launcher.library
plugins/org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.551.v20171108-1834
-showsplash
com.softwareag.common.eclipse
# The following option is only applicable to Java 7 and earlier 
# --launcher.XXMaxPermSize 
# 256m
-vm
C:/SoftwareAG/jvm/jvm/jre/bin/javaw.exe
-vmargs
-XX:+UseG1GC
-XX:+UseStringDeduplication
--add-modules=ALL-SYSTEM
-Dosgi.requiredJavaVersion=1.8
-Xms256m
-Xmx1024m
--add-modules=ALL-SYSTEM
-Dtrust_all_cert=true

I also tried adding the following lines, but no success yet:

-vmargs
-Djavax.net.ssl.trustStore="C:\SoftwareAG\jvm\jvm\jre\lib\security\integrationserver.jks"
-Djavax.net.ssl.trustStorePassword="[my_password]"

Thank you.

Did you tried adding them to the Software AG_directory \Designer\eclipse\configuration\config.ini file? Because I do see that you have added them to the eclipse.ini file, could you please confirm?
~Prashant

Hello @Renan_Lopes1

I appears the setting -Dtrust_all_cert=true is not working since it is disabled in few VM version. However, about the argument -Djavax.net.ssl.trustStore. Please try double back slashed instead of single and try again.
Eg.
-Djavax.net.ssl.trustStore=“C:\SoftwareAG\vm\jvm\jre\lib\security\integrationserver.jks”

I am assuming you have kept you truststore at this location. Generally locationis \common\conf